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SPECIFICATION 

5 Certificate Issuing Server and Certification System to Certify 

Operating Environment 

Technical Field 
[0001] 

10 The present invention relates to information processing equipment, 

a certificate issuing server, an information storage server, a verification unit, 
and a certification system, vyhich are used to certify a patrolled time and a 
patrolled site by a security guard on security patrol duty, or to certify the 
time when an image was taken and the site where the image was taken in 

15 security patrol rounds, for example. 

Background Art 
[0002] 

It is a general view, in terms of conventional security on premises 
20 and the like, that security guards from security companies make the 

rounds on the premises at a predetermined site and at a predetermined 
time to check for unusual situations. Security clients in this case need to 
confirm whether or not the security guards duly performed patrol duly at a 
set site and at a set time. Also, the security companies need to certify 
25 that a patrol duty has been duly performed. 
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[0003] 

Among means of implementing such confirmation and certification 
is a method of recording a visit to a specific site at a specific time. This 
method can be implemented as follows. Prior to security patrol rounds, 
5 lock boxes are placed at predetermined sites along the patrol route. Then, 
while on duty, a security guard manipulates the locks of the boxes (locking 
or unlocking) using keys the person carries with him or her. 
[0004] 

However, this method cannot cope with ease with the situation 
10 where the patrol route has been altered or a new route has been added 

thereto. This situation should involve relocation or addition of boxes. If a 
patrol duty arises along the route where no such boxes have been 
arranged, no records should be available of the patrol duty as duly 
performed. Hence, it is not possible to certify at a later time that security 
15 patrol rounds have been duly made. 
[0005] 

Another thing is that the security guards have to carry such keys 
with them through the patrol duty. It can be a great burden for them to 
manipulate such locks on patrol duty, which is a duty different from the 
20 security duty. Another issue is that their concentration on such lock 
manipulation may result in less attention to security. 
[0006] 

Here is another method to certify and then confirm a patrol duty as 
duly performed with the patrolled time. This method can be implemented 
25 as follows. Transmitters, instead of lock boxes, are arranged at 
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predetermined sites along a patrol route. Then, transmitters transmit the 
ID information (location information) of the transmitters together with time 
information to a receiver that a security guard on patrol duty carries with 
him or her. This method is generally called Time-stamping (See Patent 
5 Document 1). 
[0007] 

With Time-stamping, however, the operation of recording the 
location information and the time information is in the hands of security 
guards, in which a problem is posed. Time-stamped transmitter ID 
10 information (location information) and time-stamped time information can 
be counterfeited or tampered with. 
[0008] 

As a solution to this problem, there Is a method in which security 
guards do not operate Time-stamping (See Patent Document 2). 

15 According to this method, a receiver carried by a security guard sends 
transmitter ID information (location information) and time information 
received from a transmitter to a server that is managed by a third party 
without delay. Then, the server executes and stores proper 
Time-stamping. 

20 [0009] 

With those methods using Time-stamping, however, the 
aforementioned problem of being unable to cope promptly with the 
addition or alteration of the patrol route still remains. Transmitters have 
to be placed at predetermined sites along the patrol route. Also, with the 
25 latter method using Time-stamping, there is a possibility of Time-stamping 
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being counterfeited or tampered with by a third party that manages the 

server. 

[0010] 

Usually, patrol records are left after security patrol rounds. It is 
5 often the case, however, that such records are made in black and white 
into a report based on the memories of and notes by security guards about 
what drew their attention or about unusual states they encountered. As a 
result, what has been left on record is only what security guards noted. 
In other words, no records are available on what they did not take note of. 
10 Therefore, it is sometimes difficult to obtain information required at a later 
date. Furthermore, photos or images may be taken, if necessary. 
However, the photos and video images are not legitimate tools to specify 
and certify time and site. They are no use as evidence in a lawsuit or the 
like. 

15 Patent Document 1: Unexamined Patent Publication No. Sho 61-82288 
Patent Document 2: Unexamined Patent Publication No. 2004-46305 
Patent Document 3: Unexamined Patent Publication No. 2001-297062 

Disclosure of the Invention 
20 Problems to be Solved by the Invention 
[0011] 

It is an object of the present invention to provide a certification 
system designed for security patrol for certifying a patrolled time and a 
patrolled site of security patrol rounds. The certification system does not 
25 require devices to be placed in advance to certify a patrolled time and a 
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patrolled site, for example. In addition, the certification system does not 
limit the sites of security patrol rounds that can be certified to 
predetermined sites. It is another object of the present invention to 
protect certified time information and certified location information from 

5 counterfeiting or tampering not only by the party concerned but also by a 
third party, for example. It is still another object of the present invention 
to certify the time when a video image was taken and the site where the 
video image was taken by attaching the certified time information and the 
certified location information to the video image. 

10 Means to Solve the Problems 
[0012] 

A certification system according to this invention may include 
information processing equipment that may process information; a 
certificate issuing server that may issue an electronic certificate to certify 

15 an operating environment of the information processing equipment; and an 
information storage server that may store information in a storage memory 
section. Then, the information processing equipment may transmit a 
certification request of the operating environment of the information 
processing equipment to the certificate issuing server. Then, the 

20 certificate issuing server may issue the electronic certificate to certify the 
operating environment of the information processing equipment based on 
the certification request of the operating environment transmitted from the 
information processing equipment. Then, the information processing 
equipment may receive the electronic certificate issued by the certificate 

25 issuing server, generate certified information based on the electronic 
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certificate and processed information and identification information to 
identify the certified information, and transmit the certified information and 
the identification information to the information storage server Then, the 
information storage server may receive the certified information and the 
5 identification information from the information processing equipment and 
store the certified information and the identification information in the 
storage memory section; and may also receive the identification 
information, retrieve the certified information stored in the storage 
memory section, and output the certified information retrieved, 
10 [0013] 

The certificate issuing server may certify time when the information 
processing equipment operates as the operating environment. 
[0014] 

The certificate issuing server may certify location where the 
15 information processing equipment operates as the operating environment, 
[0015] 

The certificate issuing server may attach unique information 
available at no other time than a current time to time information based on 
the certification request of the operating environment transmitted from the 
20 information processing equipment, and thereby issue the electronic 
certificate to certify the current time. 
[0016] 

The information processing equipment hnay acquire time 
information indicating a current time, and transmit the time information 
25 acquired to the certificate issuing server. Then, the certificate issuing 
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server may receive the time information from the information processing 
equipment, attach unique data available at no other time than a specific 
time indicated by the time information to the time information, and 
thereby issue the electronic certificate to certify the specific time. 
5 [0017] 

The information processing equipment may acquire location 
information indicating a location of the information processing equipment, 
and transmit the location information acquired to the certificate issuing 
server. Then, the certificate issuing server may receive the location 
10 information from the information processing equipment, attach unique 

data available at no other location than a specific location indicated by the 
location information to the location information, and thereby issue the 
electronic certificate to certify the specific location. 
[0018] 

15 The certificate issuing server may attach compensation information 

to compensate the specific location indicated by the location information to 
the location information, and thereby issue the electronic certificate. 
[0019] 

The information processing equipment may generate composite 
20 information that is made up of the electronic certificate and the processed 
information, and transmit the composite information to the information 
storage server as the certified information. Then, the information storage 
server may receive the composite information and the identification 
information from the information processing equipment, and store the 
25 composite information and the identification information in the storage 
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memory section. The information storage server may also receive a query 
including the identification information, retrieve the composite information 
stored in the storage memory section, and output the composite 
information retrieved. 
5 [0020] 

The information processing equipment may generate composite 
information that is made up of the electronic certificate and the processed 
information, calculate a hash value of the composite Information, and 
transmit the hash value to the Information storage server as the certified 

10 information. Then, the information storage server may receive the hash 
value and the Identification information from the information processing 
equipment, and store the hash value and the identification Information In 
the storage memory section. The information storage server may also 
receive the composite Information, compares the composite information 

15 using the hash value, and store in the storage memory section the 

composite information compared. The information storage server may 
also receive a query Including the Identification information, retrieve the 
composite information stored in the storage memory section, and output 
the composite Information retrieved. 

20 [0021] 

The certificate issuing server and the information storage server 
may be one unit. 
[0022] 

The information processing equipment may transmit to the 
25 information storage server authentication Information to access the 
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information storage server together with the certified information and the 
Identification information. Then, the information storage server may 
receive the certified information, the identification information, and the 
authentication information from the information processing equipment, and 
5 store the certified information and the identification information received in 
the storage memory section if the authentication information is valid. 
[0023] 

The certification system may further include a verification unit that 
may verify the operating environment of the information processing 

10 equipment. Then, the information storage server may transmit part of the 
certified information and part of the identification information stored in the 
storage memory section to the verification unit. Then, the verification unit 
may receive the certified information and the identification information 
transmitted by the information processing equipment, and store the 

15 certified information and the identification information in the verification 

memory section. The Information storage server may also receive a query 
including the identification information, retrieve the certified information 
stored in the verification memory section, and verify the operating 
environment of the information processing equipment with reference to the 

20 certified information retrieved. 
[0024] 

A certificate issuing server according to this invention may issue an 
electronic certificate to information processing equipment. The certificate 
issuing server may include a certification request receiving section that 
25 may receive a certification request of an operating environment of the 
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information processing equipment; a certificate issuing section that may 
issue an electronic certificate to certify the operating environment of the 
information processing equipment based on the certification request 
received by the certification request receiving section; and a certificate 
5 transmitting section that may transmit the electronic certificate issued by 
the certificate issuing section to the information processing equipment. 
[0025] 

The certificate issuing server may certify at least one of time when 
the information processing equipment operates as the operating 
10 environment and location where the information processing equipment 
operates as the operating environment. 
[0026] 

Information processing equipment according to this invention may 
process information. The information processing equipment may include 

15 an information processing section that may process information and store 
the information as processed information; a certification requesting section 
that may transmit a certification request of an operating environment of 
the information processing equipment to a certificate authority serer that 
may issue an electronic certificate that certifies the operating environment 

20 of the information processing section; and an information outputting 

section that may receive the electronic certificate issued by the certificate 
issuing server in reply to the certification request transmitted by the 
certification request section, generate certified information based on the 
electronic certificate and the processed information as well as identification 

25 information to identify the certified information, and output the certified 
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information and the identification information. 
[0027] 

The Information processing equipment may be a mobile security 
gadget that acquires information about a security target. 
5 [0028] 

The information processing section may photograph an image, and 
store the image as the processed information. 
[0029] 

The information processing section may weigh an object, and store 
10 a weight result as the processed information. 
[0030] 

An information storage server according to this invention may 
include an information receiving section that may receive from information 
processing equipment certified information to certify an operating 

15 environment of the information processing equipment and identification 
information to identify the certified information; a storage memory section 
that may store the certified information and the identification information 
received by the information receiving section; and a certification outputting 
section that may receive a query including the identification information, 

20 retrieve the certified information stored in the storage memory section, 

output the certified information retrieved, and thereby certify the operating 

environment of the information processing equipment. 

[0031] 

The storage memory section may further store an order of 
25 reception of the certified information and the identification information 
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received by the information receiving section. 
[0032] 

A verification unit according to this invention may include a 
verification receiving section that may receive certified information and 
5 identification information from an information storage server; a verification 
memory section that may store the certified information and the 
identification information received by the verification receiving section; and 
a verifying section that may receive a query including the identification 
information, retrieve the certified information stored in the verification 
10 memory section, and verify an operating environment of information 

processing equipment with reference to the certified information retrieved. 
[0033] 

A certification system according to this invention may include 
information processing equipment that may process information; a 

15 certificate issuing server that may issue an electronic certificate to certify 
an operating environment of the information processing equipment; and an 
information storage server that may store information in a storage memory 
section. Then, the information processing equipment may transmit a 
certification request of the operating environment of the information 

20 processing equipment to the certificate issuing server. Then, the 

certificate issuing server may issue the electronic certificate to certify the 
operating environment of the information processing equipment based on 
the certification request of the operating environment transmitted from the 
information processing equipment. Then, the information processing 

25 equipment may receive the electronic certificate issued by the certificate 
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issuing server, generate certified information based on the electronic 
certificate and processed information, and transmit the certified 
information to the information storage server. Then, the information 
storage server may receive the certified information from the information 
5 processing equipment, and store the certified information in the storage 
memory section. The information storage server may also receive 
identification information to identify the certified information, retrieve the 
certified information stored in the storage memory section based on the 
identification information received, and output the certified information 
10 retrieved. 
[0034] 

Information processing equipment according to this invention may 
process information. The information processing equipment may include 
an information processing section that may process information, and store 

15 the information as processed information; a certification requesting section 
that may transmit a certification request of an operating environment of 
the information processing equipment to a certificate authority serer that 
may issue an electronic certificate that certifies the operating environment 
of the information processing section; and an information outputting 

20 section that may receive the electronic certificate issued by the certificate 
issuing server in reply to the certification request transmitted by the 
certification requesting section, generate certified information based on the 
electronic certificate and the processed information, and output the 
certified information generated. 

25 [0035] 
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An information storage server according to this invention nnay 
include an information receiving section tinat may receive certified 
information to certify an operating environment of the information 
processing equipment from information processing equipment; a storage 

5 memory section tinat may store the certified information received by the 
information receiving section; and a certification outputting section that 
may receive a query including identification information to identify the 
certified information, retrieve the certified information stored in the 
storage memory section, output the certified information retrieved, and 

10 thereby certify the operating environment of the information processing 
equipment. 



Effect of the Invention 
[0036] 

15 According to the present invention, a certification system may be 

configured to include information processing equipment, a certificate 
issuing server, and an information storage server. The certificate issuing 
server may issue an electronic certificate to certify an operating 
environment of the information processing equipment based on a 

20 certification request from the information processing equipment of the 

certification system. The information processing equipment may generate 
certified information based on processed information and the electronic 
certificate. Also, the information processing equipment may transmit the 
certified information to the information storage server together with 

25 identification information for identifying the certified information. The 
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information storage server may store the certified information for eacin 
piece of the identification information. Then, at a later date, the certified 
information may be retrieved and acquired from the information storage 
server based on the identification information. As a result, the 
5 certification system may certify the operating environment of the 
information processing equipment when the information processing 
equipment handled the processed information. 

Best l^ode for Carrying out the Invention 
10 [0037] 

Embodiment 1. 

With a first embodiment, a description will be given of a case of 
certifying the time (including ''date" in this embodiment) when an image 
was taken and the site (hereinafter referred to also as '"location") where 
15 the image was taken by a security guard on security patrol duty. Then, 
the authenticity of the time and site may be confirmed at a later time. 
[0038] 

Fig. 1 is a diagram Illustrating a configuration that is required for 
certifying the time when a specific image was taken and the site where the 
20 specific image was taken in security patrol rounds according to the first 
embodiment. 

To certify patrolled time and site, the following are provided: a 
Global Positioning System (GPS) satellite 10 that supplies location 
information of an arbitrary point on the earth; a weather satellite 20 that 
25 photographs meteorological phenomena on the earth (e.g., cloud shapes) 
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and supplies the images thereof; information processing equipment 30 (It 
is assumed here that a video camera is equipped with a function of the 
information processing equipment 30) that is carried by a security guard 
on security patrol duty; a certificate issuing server 40 that is installed at a 

5 certificate issuing center to certify time information and location 
information; an information storage server 50 that is installed at an 
information storage center to store certified time information and certified 
location information as well as an image as processed information having 
the certified time information and the certified location information being 

10 attached thereto; a verification unit 60 that verifies the authenticity of the 
time and site of that image; and a network 70 that interconnects the 
information processing equipment 30, the certificate issuing server 40, the 
information storage server 50, and the verification unit 60. 
[0039] 

15 Fig. 2 shows the configuration of a certification system designed for 

security patrol according to this embodiment. 

The certification system for security patrol is provided with the 

information processing equipment 30 to process information, the certificate 

issuing server 40 to issue an electronic certificate for certifying an 
20 operating environment of the information processing equipment, and the 

information storage server 50 to store information in a storage memory 

section (described later in detail). 

[0040] 

The information processing equipment 30 is equipped with a video 
25 camera function. The information processing equipment 30 is used to 
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take a video of a patrol site on security patrol duty to check for unusual 
situations. At the same tinne, the information processing equipment 30 
acquires from the GPS satellite 10 the location information and the time 
information of the site where the video was taken. 
5 [0041] 

It should be noted that the ''operating environment" according to 
this embodiment indicates the time when a security guard took a video 
using the information processing equipment 30 equipped with a video 
camera function and the location where the video was taken. Also, the 
10 ''processed information" here indicates information that is processed by the 
information processing equipment 30. In other words, since the 
information processing equipment 30 is equipped with a video camera 
function, a video image corresponds to the "processed information" 
[0042] 

15 The certificate issuing server 40 certifies the time when the 

information processing equipment 30 operates and the location where the 
information processing equipment 30 operates, as the operating 
environment. Alternatively, the certificate issuing server 40 may certify as 
the operating environment at least one of the time when the information 

20 processing equipment 30 operates and the location where the information 
processing equipment 30 operates. 
[0043] 

Therefore, the certificate issuing server 40 receives the location 
information and the time information from the information processing 
25 equipment 30. Then, the certificate issuing server 40 certifies the location 
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information and the time information by using a ''method of certifying that 
specific location information was acquired at a corresponding location" 
(discussed later in detail), and a ''method of certifying that specific time 
information was acquired at a corresponding time" (discussed later in 
5 detail), respectively. Then, the certificate issuing server 40 transmits 
certified location information and certified time information to the 
information processing equipment 30 as an electronic certificate. 
[0044] 

The information storage server 50 receives from the information 
10 processing equipment 30 and then stores the processed information, which 
is a video image taken in security patrol rounds, and the electronic 
certificate of the certified location information and the certified time 
information. In addition, the information storage server 50 makes a query 
to the certificate issuing server 40 about the authenticity of the electronic 
15 certificate of the certified location information and the certified time 
information issued by the certificate issuing server 40. 
[0045] 

The information processing equipment 30 transmits a certification 
request of the operating environment thereof to the certificate issuing 

20 server 40. The certificate issuing server 40 issues the electronic certificate 
to certify the operating environment of the information processing 
equipment 30 based on the certification request of the operating 
environment transmitted from the information processing equipment 30. 
The information processing equipment 30, upon receipt of the electronic 

25 certificate issued by the certificate issuing server 40, generates certified 
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information based on the electronic certificate and the processed 
information, and identification information for identifying this certified 
information. Then, the information processing equipment 30 transmits 
the certified information and the identification information to the 
5 information storage server 50. The information storage server 50 receives 
the certified information and the identification information from the 
information processing equipment 30 and then stores the certified 
information and the identification information received in a storage 
memory section. In addition, the information storage server 50 receives 
10 the identification information with a query for a verification request, then 
retrieves the certified information stored in the storage memory section, 
and outputs the certified information. 
[0046] 

For this reason, the information processing equipment 30 may be a 
15 mobile security gadget that acquires information about a security target, 
such as a camera, a video camera, and a recorder. 
[0047] 

The identification information is information that identifies which 
unit of the information processing equipment transmits which piece of the 

20 certified information at what time. The information storage server 50 may 
sometimes store many pieces of the certified information transmitted from 
two or more units of the information processing equipment. Therefore, 
the identification information is assigned to identify each piece of the 
certified information. 

25 [0048] 
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Fig. 3 is a diagram illustrating a configuration of the information 
processing equipment 30. 

The information processing equipment 30, which processes 
information, includes: an information processing section 31 that processes 
5 information and stores it as the processed information; a certification 
requesting section 32 that transmits the certification request of the 
operating environment of the information processing equipment 30 to the 
certificate issuing server 40 that issues the electronic certificate for 
certifying the operating environment of the information processing section 

10 31; and an information outputting section 33 that receives the electronic 
certificate issued by the certificate issuing server 40 in response to the 
certification request transmitted by the certification requesting section 32, 
and generates the certified information based on the electronic certificate 
and the processed information as well as the identification information for 

15 identifying this certified information, and outputs the certified information 
and the identification information generated. The information processing 
equipment 30 further includes a time/ location information receiving 
section 34 that receives the time information and the location information 
for specifying the operating environment from the GPS satellite 10. 

20 [0049] 

Fig. 4 Is a diagram illustrating a configuration of the certificate 
issuing server 40. 

The certificate issuing server 40, which issues the electronic 
certificate to the information processing equipment 30, includes: a 
25 certification request receiving section 41 that receives the certification 
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request of the operating environment of the information processing 
equipment 30; a certificate issuing section 42 that issues the electronic 
certificate for certifying the operating environment of the information 
processing equipment 30 based on the certification request received by the 
5 certification request receiving section 41; a certificate transmitting section 

43 that transmits the electronic certificate issued by the certificate issuing 
section 42 to the information processing equipment 30. The certificate 
issuing server 40 further includes a weather information receiving section 

44 that receives weather information from the weather satellite 2 and a 
10 location information compensating section 45 that compensates the 

location information that is included in the certification request received by 
the certification request receiving section 41 to obtain accurate location 
information. 
[0050] 

15 Fig. 5 is a diagram illustrating a configuration of the information 

storage server 50. 

The information storage server 50 includes: an information 
receiving section 51 that receives from the information processing 
equipment 30 the certified information to certify the operating environment 

20 of the information processing equipment 30 and the identification 

information to identify this certified information; a storage memory section 
53 that stores the certified information and the identification information 
received by the information receiving section 51; and a certification 
outputting section 52 that receives the query including the identification 

25 information, retrieves the certified information stored in the storage 
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memory section 53, and outputs the certified information retrieved, 
thereby certifying the operating environment of the information processing 
equipment 30. 
[0051] 

5 The storage memory section 53 further stores the order of 

reception of the certified information and the identification information 
received by the information receiving section. 
[0052] 

A description will now be given of a process of certifying patrolled 
10 time and location on security patrol duty using the certification system 

designed for security patrol. In the following example, both patrolled time 
and location on security patrol duty are certified. Alternatively, however, 
either patrolled time or patrolled location may be certified. 
[0053] 

15 The information processing equipment 30 acquires from the 

time/location information receiving section 34 the time information that 
indicates a current time and the location information that indicates the 
location of the information processing equipment 30. The information 
processing equipment 30 then transmits the time information and the 

20 location information acquired to the certificate issuing server 40 via the 
certification requesting section 32. 
[0054] 

The certificate issuing server 40 receives the time information and 
the location information from the information processing equipment 30 via 
25 the certification request receiving section 41. The certificate issuing 
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section 42 attaches unique data available at no other time than a specific 
time indicated by the time information to the time information. Also, the 
certificate issuing section 42 attaches unique data available at no other 
location than the specific location indicated by the location information to 
5 the location information. In that manner, the certificate issuing section 42 
issues the electronic certificate for certifying time and location. 
[0055] 

The location information compensating section 45 in the certificate 
issuing server 40 attaches compensation information for compensating a 
10 location indicated by the location information to the location information. 
The location information compensating section 45 thus issues the 
electronic certificate. 
[0056] 

The information outputting section 33 in the information processing 
15 equipment 30 generates composite information that is made up of the 

electronic certificate received from the certificate transmitting section 43 in 
the certificate issuing server 40 and the processed information acquired by 
the information processing section 31. The information outputting section 
33 then transmits the composite information to the information storage 
20 server 50 as the certified information. 
[0057] 

The information receiving section 51 in the information storage 
server 50 receives the certified information and the identification 
information of the certified information from the information processing 
25 equipment 30 and stores the certified information and the Identification 
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information of the certified information in the storage memory section 53. 
In addition, the information receiving section 51, when a query for the 
verification request is transmitted, receives the query including the 
identification information, retrieves the certified information stored in the 
5 storage memory section 53, and outputs the certified information 
retrieved. 
[0058] 

The information outputting section 33 in the information processing 
equipment 30 may alternatively generate the composite information that is 
10 made up of the electronic certificate and the processed information, 

calculate the hash value of the composite information, and transmit the 
hash value to the information storage server 50 as the certified 
information. 
[0059] 

15 The information receiving section 51 in the information storage 

server 50 receives the certified information as the hash value of the 
composite information and the identification information of the certified 
information from the information processing equipment 30 and stores the 
certified information as the hash value of the composite information and 

20 the identification information of the certified information in the storage 
memory section 53. Then, at a later date, the information receiving 
section 51 receives the composite information, calculates the hash value of 
the composite information, and then compares the hash value with 
previously received certified information. If they match, the composite 

25 information is stored in the storage memory section 53 in correspondence 
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With the identification information. At the time of verification, the 
information receiving section 51 receives a query including the 
identification information, retrieves the composite Information stored in the 
storage memory section 53, and then outputs the composite information 
5 retrieved. The ''composite information retrieved" of this specific case 
corresponds to '"retrieved certified information" shown in Fig. 5. 
[0060] 

It should be noted that the certificate issuing server 40 and the 
information storage server 50 may be one unit. 
10 [0061] 

A description will now be given of a process of certifying the time 
when an image was taken by a security guard on security patrol duty and 
the location where the image was taken in detail. Fig. 6 is a diagram 
illustrating a process of certifying at which site a specific image was taken 
15 by a security guard at which time on security patrol duty. 
[0062] 

A security guard takes a video of the security condition at each site 
on security patrol duty using the information processing equipment 30 that 
is equipped with a video camera function. The information processing 

20 equipment 30 receives the time information and the location information of 
that specific site from the GPS satellite 10. Then, the information 
processing equipment 30 encodes the time information and the location 
information for the purpose of prevention against tampering and leakage. 
Then, the information processing equipment 30 transmits encoded time 

25 information and encoded location information to the certificate issuing 
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server 40 via a radio channel of a wireless LAN (not shown), a mobile 
phone (not shown), or the like and the network 70 (Step SlOl). 
[0063] 

The execution of this process may be started manually by a 
5 security guard, or automatically at certain time intervals by the information 
processing equipment 30. Or, otherwise, given the fact that the time 
information and the location information are constantly received from the 
GPS satellite 10, only the transmission to the certificate issuing server 40 
of the time information and the location information received may be 
10 executed by the manual operation of a security guard, the automatic 
operation at certain time intervals, or the like. 
[0064] 

The certificate issuing server 40 decodes the encoded time 
information and the encoded location information received from the 

15 information processing equipment 30 (Step S102). Then, the certificate 
issuing server 40 performs a compensation process for compensating a 
location included in the location information more accurately (Step S103). 
Subsequently, the certificate issuing server 40 executes a ''method of 
certifying that specific location information was acquired at a 

20 corresponding location" (discussed later in detail) and a '"method of 

certifying that specific time information was acquired at a corresponding 

time" (discussed later in detail). 

[0065] 

A description will now be given of the ''method of certifying that 
25 specific location information was acquired at a corresponding location" in 
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detail. The time/location information receiving section 34 in the 
information processing equipment 30 receives sets of position codes and 
carrier waves from a plurality of radio receiving GPS satellites 10 capable 
of receiving radio waves. The certification requesting section 32 in the 

5 information processing equipment 30 encodes, with its own ID as an 

encryption key, received sets of position codes and carrier waves together 
with positioning satellite identification numbers received. Then, 
certification requesting section 32 transmits encoded sets with encoded 
identification number to the certificate issuing server 40 as the location 

10 information. 
[0066] 

In the meantime, for the purpose of providing the location 
information with accuracy, additional information other than the location 
information acquired from GPS satellites 10 may be acquired. The 

15 additional information may include: natural phenomenon information that 
is available at a specific location about temperature, humidity, atmospheric 
pressure, altitude, wind velocity, or the like; and environmental 
information that may be acquired via a means of communication such as 
base station information. Then, the additional information is transmitted 

20 to the certificate issuing server 40, so that the identity of the location is 
made clean In addition, for the purpose of effective prevention against 
spoofing, instead of always transmitting all acquired data, in interactions 
with the certificate issuing server 40 using encryption means, data may be 
selected and only selected data may be transmitted, which is similar to a 

25 method using encryption means. 
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[0067] 

The certification request receiving section 41 in the certificate 
issuing server 40 receives the location infornnation from the information 
processing equipment 30, and decodes the location information and then 
5 transmits decoded location information to the certificate issuing section 42. 
The certificate issuing section 42 calculates the location of the information 
processing equipment 30, which requested the certification of the location 
information, based on the decoded position codes, carrier waves, and 
identification numbers of the positioning satellites. Then, the certificate 

10 issuing section 42 stores a calculation result in a database provided in the 
certificate issuing server 40 (Step S104). For this location calculation, any 
generally known method may be utilized. 

The certificate issuing section 42 then generates a certificate to 
certify the calculated location of the information processing equipment 30. 

15 The certificate issuing section 42 then provides the certificate with copy 
guard for the purpose of prevention against tampering, and transmits the 
certificate to the information processing equipment 30. It should be noted 
that the generated certificate certifies an ID unique to each terminal. Any 
generally known method may be employed as the copy guard method. 

20 [0068] 

By thus calculating a location based on the identification numbers, 
position codes, and carrier waves of the GPS satellites 10 that are available 
at no other location than a specific location at no other time than a specific 
time, a fact of existence at that specific location and at the specific time 
25 may be certified. 
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[0069] 

A description will now be given of the ''method of certifying that 
specific time information was acquired at a corresponding time" in detail. 
To certify that specific time information is acquired at a corresponding time, 
5 the invention of certifying time disclosed in Patent Document 3 is utilized, 
for example. According to this invention, the authenticity of a specific 
time that needs certification is certified with an attachment of the natural 
phenomenon (weather information, here) that occurred at that specific 
time to specific time information. 
10 [0070] 

The certificate issuing server 40 receives the weather information 
(cloud shapes, specifically) that was photographed by a weather satellite at 
a specific time indicated by the decoded time information (Step S105). 
Then, the certificate issuing server 40 attaches the weather information to 
15 the time information, and stores the time information in a database 
provided therein as certified time information (Step S106). 
[0071] 

The certificate issuing server 40 generates a hash value of the 
certified time information and the certified location information utilizing a 

20 hash function. This hash value is a unique value determined based on the 
natural phenomenon information, time information, and location 
information. Since the hash function is a one-way function, the hash 
value is irreversible. The hash value is transmitted to the information 
processing equipment 30 as the electronic certificate of the time 

25 information and the location information by the certificate issuing server 
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40 (Step S107). 
[0072] 

The information processing equipment 30 generates the hash value 
of the video image (Step S108). Then, the information processing 
5 equipment 30 attaches the electronic certificate of the time information 
and the location information received from the certificate issuing server 40 
to the hash value of the video image, and thereby generates the certified 
information. Then, the information processing equipment 30 transmits 
the certified information to the information storage server 50 together with 
10 the identification information (Step S109). 
[0073] 

The information storage server 50, upon receipt of the certified 
Information from the information processing equipment 30, assigns a 
unique number, such as the order of reception, to the certified information. 

15 Then, the information storage server 50 stores the certified information in 
a database provided in the information storage server 50 (Step SllO). 
Subsequently, the information storages server 50 requests the certificate 
issuing server 40 to confirm whether or not the certified time information 
and the certified location information included in the certified information 

20 received are the ones that the certificate issuing server 40 generated (Step 
Sill). 
[0074] 

The certificate issuing server 40, upon request of the confirmation 
from the information storage server 50, confirms whether the certified time 
25 information and the certified location information received are the ones the 
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certificate issuing server 40 generated or not (Step S112). TInen, the 
certificate issuing server 40 transnnits the confirnnation result to the 
information storage server 50 (Step S113). 
[0075] 

5 Then, at a later time when the need arises to verify the time when 

the specific image was tal<en by a security guard on security patrol duty 
and the site where the specific image was taken, a verifier makes a query 
to the information storage server 50 using the verification unit 60 (Step 
SI 14). The information storage server 50 performs a verification and 
10 then transmits a verification result to the verification unit 60 (Step S115). 
The verification unit 60 receives the verification result and the verifier 
confirms the content thereof (Step S116). 
[0076] 

According to this embodiment, the information processing 
15 equipment, by utilizing the electronic certificate for certifying the operating 
environment of the information processing equipment that was issued by 
the certificate issuing server, may certify the operating environment in 
which the information processing equipment handled the processed 
information. Also, by storing in the information storage server the 
20 processed information and the operating environment in which the 
processed information was handled by the information processing 
equipment, the operating environment in which the processed information 
was handled by the information processing equipment may be verified. 
[0077] 

25 According to this embodiment, it becomes possible to certify the 



32 

authenticity of the time when a specific video image was taken in security 
patrol rounds and the location where the specific video image was taken. 
As a result, the video image may have the quality of evidence, and thereby 
be utilized in a trial or the like. 
5 [0078] 

According to this embodiment, the information processing 
equipment, by utilizing the electronic certificate issued by the certificate 
issuing server for certifying the operating time of the information 
processing equipment, may certify the time when the information 
10 processing equipment handled the processed information. 
[0079] 

According to this embodiment, the information processing 
equipment, by utilizing the electronic certificate issued by the certificate 
issuing server to certify the location where the information processing 
15 equipment operates, may certify the location where the information 
processing equipment handled the processed information. 
[0080] 

According to this embodiment, the information processing 
equipment, by utilizing the certificate generated with the unique data 
20 available at no other time than a specific time attached to the time 

information by the certificate issuing server, may certify the time when the 
information processing equipment handled the processed information. 
[0081] 

According to this embodiment, the information processing 
25 equipment, by utilizing the certificate generated with the unique data 
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available at no other location than a specific location where the information 
processing equipment existed attached to the location information by the 
certificate issuing server, may certify the location where the information 
processing equipment handled the processed information. 
5 [0082] 

According to this embodiment, the information processing 
equipment, by utilizing the compensation information to compensate the 
location indicated by the location information, may certify the location 
where the information processing equipment handled the processed 
10 information with more accuracy. 
[0083] 

According to this embodiment, the information processing 
equipment may transmit to the information storage server the processed 
information and the electronic certificate to certify the specific time when 

15 the processed information was handled and the specific location where the 
processed information was handled. Then, the information storage server 
may store the processed information and the electronic certificate therein. 
Then, at a later date, a verifier may verify the authenticity of the time 
when the processed information was handled and the location where the 

20 processed information was handled. 
[0084] 

According to this embodiment, the information processing 
equipment, by using the hash value of the processed information and the 
electronic certificate to certify the specific time when the processed 
25 information was handled and the specific location where the processed 
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information was handled as tlie data transmitted to and stored in the 
information storage server, may reduce the amount of data to be 
transmitted and stored. This may also protect data from leakage and 
tampering during transmission. 
5 [0085] 

According to this embodiment, the configuration of the certification 
system may be simplified. The cost of system construction and operation 
required may also be reduced. 
[0086] 

10 According to this embodiment, the certificate issuing server of the 

certification system may be configured to include the certification request 
receiving section, the certificate issuing section, and the certificate 
transmitting section. 
[0087] 

15 According to this embodiment, the certificate issuing server may 

certify the time when the information processing equipment operates and 
the location where the information processing equipment operates. 
[0088] 

According to this embodiment, the information processing 
20 equipment of the certification system may be configured to include the 

information processing section, the certification requesting section, and the 

information outputting section. 

[0089] 

According to this embodiment, a mobile security gadget that 
25 acquires information about a security target during security patrol rounds 
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may be utilized as the information processing equipment. 
[0090] 

According to this embodiment, the information storage server of 
the certification system may be configured to include the information 
5 receiving section, the storage memory section, and the certification 
outputting section. 
[0091] 

According to this embodiment, the information storage server may 
manage the certified information and the identification information in the 
10 order of reception, which allows the certified information and the 
identification information searchable and retrievable. 
[0092] 

According to this embodiment, real time acquisition is allowed of a 
current location of a security guard on security patrol duty, a patrolled 
15 route, and a state of progress of security patrol duty by utilizing the time 
information and the location information that are transmitted from the 
information processing equipment. 
[0093] 

According to this embodiment, images may be provided with the 
20 quality of evidence by the attachment of the certified time information and 
the certified location information. This may contribute to early settlement 
of an incident or an accident as well as early completion of trials. 
[0094] 

Conventionally, images are taken by physical films and by physical 
25 recording, which gives the evidence value to the images. Digital data. 



however, has little quality of physical proof and thereby the quality of 
evidence is low. Now, if data about natural phenomena is added to such 
digital data, a physical link is created. Then, if being encoded, and signed 
by a tamper resistant terminal that receives the certified data., the digital 
5 data improves its quality of proof. Hence, a storage mechanism can be 
developed whereby the quality of proof of digital data may be secured as 
evidence. 
[0095] 

With further reference to this embodiment, this embodiment is one 
10 type of patrol means designed for security in patrol surveillance. The 
equipment that specifies a patrolled location and acquires information to 
certify a specified location is carried along. Then, the patrolled time and 
location is certified by information collected by the equipment. Then, by 
taking images such as still images and video images of that specific site by 
15 the information processing equipment, it may be certified that the security^ 
patrol duty has been duly performed at the specific site. Furthermore, by 
adding tamper proof means to information about still pictures or video 
images, and recorded voices, a still picture or video image taken at a 
specific patrolled site at a specific time may be used as evidence in a 
20 report of performance of a security patrol duty. 
[0096] 

Furthermore, the terminal that is carried in security patrol rounds 
includes: the photographic means for taking videos and pictures; the 
means of recording voices; the means for acquiring information 
25 transmitted from satellites that is available at no other time and location 
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than a particular time and location, and acquiring the location information 
of the satellites to certify the location; the function to transmit the 
information to the information storage server; the communication means 
for acquiring the certification information of time transmitted from the 
5 certificate issuing server; the means for storing acquired information; the 
means for embedding the acquired information in photographed image 
data or video image data; and the function to identify the terminal from 
among other terminals. 
[0097] 

10 By certifying the time when a specific image was taken by a 

patroller on security patrol duty and the location where the specific image 
was taken, video images, still pictures, and voices may be utilized as 
evidence in the reports of security patrol duty. 
[0098] 

15 By reporting the location of a patroller in security patrol rounds to 

the control center at every patrolled location, a patrolled route of the 
patroller may be certified, and the center side may take hold of the 
location of the patroller. 
[0099] 

20 The photographic equipment holds the electronic certificate to 

certify the time and location transmitted from the certificate issuing server, 
incorporates the electric certificates with image data, and adds an 
electronic signature thereto, thereby preventing tampering. Then, the 
data is transmitted to the information storage server. The information 

25 storage server numbers and stores the data in the order of reception. 
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thereby certifying that received images were photographed before the 
specified time and date. 

Furthermore, the information storage server confirms the 
certificate issuing server whether or not the certificate issuing server 
5 transmitted the electronic certificate for certifying time and location to 
registered equipment. In addition, it may enhance the quality of proof of 
images if serial numbers are also transmitted to the certificate issuing 
server, or the serial numbers are laid open to outside groups. 
[0100] 

10 If the certificate issuing server and the Information storage server 

are separated from each other, digital data operation may be performed 
under independent management. Hence, highly confidential operation and 
management may be achieved. 
[0101] 

15 Conventionally, in a security patrol report, visual information is 

presented orally or in writing. However, the report based on video 
information and audio information with certification to certify the time, the 
location and the tamper proof condition may become available. Hence, 
real time secured information may be provided. 

20 [0102] 

Only to transmit real time video and audio with certified time and 
location to an integrated command center where security patrol duty is 
managed or to customers eliminates the necessity of transmitting the time 
information and the location information at the same time. Hence, by 
25 providing experts in disaster prevention, crime prevention, accident, or the 
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like with proper information to seek directions in emergency, work may be 
carried out under real time direction of accident treatment or disaster 
response. 
[0103] 

5 TIlis mechanism may be applied directly to robots. If a robot is 

equipped with a function to record and transmit a video and an audio with 
certification to certify the time information and the location information, it 
becomes possible to handle security matters or disaster prevention matters 
that are beyond human capability, 

10 [0104] 

Security patrol cars may be managed by the certification of time 
and location, and security guards may be managed collectively by the 
certification of time and location at the center. Hence, the location 
information of all security patrol cars and all security guards may be 
15 managed for the purpose of emergency assistance. 
[0105] 

The photographic equipment may have an automatic information 
transmitting function. Hence, safe conditions of security guards may be 
confirmed together with their activities. 
20 [0106] 

If encoded information is changed when the equipment is updated 
automatically, the spoofing of the photographic equipment may be 
prevented, which ensures safety in photographing with electronic data. 
[0107] 

25 The equipment may be tamper resistant. Accordingly, the 
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equipment may be configured to lose all of its functions if components are 
removed for the purpose of disassembling or conversion. Hence, security 
of use of the equipment may be ensured. 

5 [0108] 

Embodiment 2. 

A second embodiment describes a case of certifying a patrolled 
time and a patrolled location in security patrol rounds to certify the fact 
that a security guard has duly performed a security patrol duty. According 

10 to this embodiment, all that is required is to certify that a security guard 
existed at a specific location and at a specific time. Therefore, all that is 
required here is to show that information processing equipment has 
acquired and held time information and location information that are 
available at no other time and location than a specific time and site. 

15 [0109] 

A configuration that is required for certifying a patrolled time and a 
patrolled site by a security guard on security patrol duty is the same as 
that shown in Fig. 1 discussed in the first embodiment. Also, a 
certification system to be used here is the same as that shown in Fig. 1 
20 discussed in the first embodiment. The function and configuration of each 
unit of equipment used here is the same as that of Fig. 1 according to the 
first embodiment. 
[0110] 

Now, a description will be given of a process of certifying a 
25 patrolled time and a patrolled location by a security guard on security 
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patrol duty. Fig. 7 is a diagram illustrating a process of certifying a 
patrolled time and a patrolled location by a security guard on security 
patrol duty. 
[0111] 

5 A security guard presets his or her own identification information 

(ID information) in the information processing equipment 30 by prior 
arrangement. It should be noted that the information processing 
equipment also stores its own identification information (ID information). 
[0112] 

10 The security guard conducts a patrol at each site, carrying 

information processing equipment 30 with him or her. In the meantime, 
the information processing equipment 30 receives the time information and 
the location information of that specific site from the GPS satellite 10. 
Then, the information processing equipment 30 encodes the time 

15 information and the location information for the purpose of prevention 
against tampering and leakage. Then, the information processing 
equipment 30 transmits encoded time information and encoded location 
information to the certificate issuing server 40 via a radio channel, such as 
a wireless LAN and a mobile phone, which are not shown in the figures, 

20 and the network 70 (Step S201). 
[0113] 

The execution of this process may be started manually by a 
security guard, or automatically at certain time intervals by the information 
processing equipment 30. Or, otherwise, given the fact that the time 
25 information and the location information are constantly received from the 
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GPS satellite 10, only the transmission to the certificate issuing server 40 
of the time information and the location information received may be 
executed by the manual operation of a security guard, the automatic 
operation at certain time intervals, or the like. 
5 [0114] 

The certificate issuing server 40 decodes the encoded time 
information and the encoded location information received from the 
information processing equipment 30 (Step S202). Then, the certificate 
issuing server 40 performs a compensation process for compensating a 

10 location included in the location information more accurately (Step S203). 
Subsequently, the certificate issuing server 40 implements the method of 
certifying that specific location information was acquired at a 
corresponding location and the method of certifying that specific time 
information was acquired at a corresponding time. 

15 [0115] 

The method of certifying that specific location information was 
acquired at a corresponding location of this embodiment is the same as 
that discussed in the first embodiment. (The process of Step S204 is the 
same as that of Step S104 of the first embodiment.) The method of 
20 certifying that specific time information was acquired at a corresponding 
time is the same as that discussed in the first embodiment. (The 
processes of Step S205 and Step S206 are the same as those of Step S105 
and Step S106, respectively, of the first embodiment.) 
[0116] 

25 The certificate issuing server 40 using a hash function generates 



the hash value of certified location information and certified time 
information including natural phenomena information. Generated hash 
value is transmitted to the information processing equipment 30 as the 
electronic certificate of the location information and the time information 
5 by the certificate issuing server 40 (Step S207). 
[0117] 

The information processing equipment 30 receives the electronic 
certificate of the time information and the location information from the 
certificate issuing server 40. Then, the information processing equipment 

10 30 attaches the electronic certificate to the identification information of the 
security guard and the identification information of the information 
processing equipment 30, and thereby generates certified information. 
Then, the information processing equipment 30 transmits the certified 
information to the information storage server 50 together with 

15 identification information to identify the certified information (Step S208). 
[0118] 

The information storage server 50, upon receipt of the certified 
information or the hash value thereof from the information processing 
equipment 30, assigns a unique number, such as the order of reception 

20 thereto. Then, the information storage server 50 stores the certified 
information or the hash value in a database provided in the information 
processing equipment 30 (Step S209). Then, the information storage 
server 50 requests the certificate issuing server 40 to confirm whether or 
not the time information and the location information received are the ones 

25 the certificate issuing server 40 generated (Step S210). 
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[0119] 

The certificate issuing server 40, upon receipt of the confirmation 
request from the information storage server 50, confirms the authenticity 
of the certified time information and the certified location information 
5 (Step S211). Then, the certificate issuing server 40 transmits the 
confirmation result to the information storage server 50 (Step S212). 
[0120] 

Then, at a later time when the need arises to verify a patrolled 
time and a patrolled location by a security guard on security patrol duty, 

10 then a verifier makes a query about the patrolled time and the patrolled 
location to the information storage server 50 using the verification unit 60 
(Step S213). The information storage server 50 performs a verification 
and transmits a verification result to the verification unit 60 (Step S214). 
The verification unit 60 receives the verification result. Then, the verifier 

15 confirms the content of the verification result (Step S215). 
[0121] 

According to this embodiment, there is no need of installing a 
special device for certifying a patrolled time and a patrolled site by prior 
arrangement for certifying the patrolled time and the patrolled site. In 

20 addition, any site of security patrol rounds may be certified without 
limitation to predetermined sites. Furthermore, the certified time 
information and the certified location information may be protected from 
counterfeiting or tampering not only by the party concerned but also by a 
third party. 

25 [0122] 
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This embodiment is applicable not only to the case of certifying 
that a security guard has duly conducted a security patrol, but also to a 
case of certifying that a person or a mobile object has followed a 
prescribed route properiy. 
5 [0123] 

For example, it may be applied in freight transfer services by long 
distance trucks to confirming which point a truck ran through at what time. 
It may also be applied in a race such as orienteering to confirming which 
point a contestant or a player ran through at what time. It may also be 

10 applicable in a stamp rally. Instead of using a stamp, information for 
identifying an electronic certificate may be outputted via a printer or the 
like, and thus a participant may confirm which point the person visited at 
what time. It may also be applied in bus or streetcar services. It is 
recorded that at which stop or point a passenger got on a vehicle and at 

15 which stop or point the person left the vehicle, or at which time a 

passenger got on a vehicle and at which time the person left the vehicle. 
Then, fare calculation may be made based on distance traveled, stage 
length, travel time, and the like, and charge the fare automatically. Hence, 
flexible fare setting may be achieved. Instead of being carried by a 

20 traveling person or a mobile object, however, the information processing 
equipment 30 may be placed at two or more sites by prior arrangement. 
The process of Fig. 7 may be performed at the time when a communication 
is established between communication equipment (e.g., a wireless tag) 
carried by a person or a mobile object and the information processing 

25 equipment 30 (e.g., a wireless reader). 
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[0124] 

Embodiment 3. 

A third embodiment utilizes the same certification system as that 
5 discussed in the first embodiment. According to the third embodiment, for 
the purpose of illegal parking crackdown, the time when the photo of an 
illegally parked vehicle was taken by a policeman or the like on patrol duty 
and the location where the photo was taken in a specific area are certified 
to check the authenticity of the time and the location at a later time. 
10 [0125] 

According to this embodiment, the information processing 
equipment 30 shown in Fig. 1 of the first embodiment may be electronic 
equipment that is equipped with a function to take photos (images), such 
as a digital camera. 
15 [0126] 

In this embodiment, a person who clamps down on illegal parking 
vehicles, such as a policeman, takes photos of illegally parked vehicles by 
using the information processing equipment 30 that is equipped with a 
camera function. The information processing equipment 30 acquires an 

20 electronic certificate issued by the certificate issuing server 40 through the 
processes of Step SlOl to Step S107 shown in Fig. 6 discussed in the first 
embodiment. Then, the information processing equipment 30 generates 
certified information based on the photo of an illegally parked vehicle and 
the electronic certificate acquired. Then, the information processing 

25 equipment 30 transmits the certified information to the information storage 
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server 50. In Step SI 10, the information storage server 50 receives and 
stores in a database the certified information. Through the processes of 
Step Sill to Step S113, the information storage server 50 performs a 
confirmation process with the certificate issuing server 40. 
5 [0127] 

In Step SlOl, the information processing equipment 30 may 
additionally acquire information about surrounding objects or distance 
information based on a focal length when a photo is taken so as to 
compensate the location information automatically. 
10 [0128] 

When the need arises to verify the time when the photo of an 
illegally parked vehicle was taken and the site where the photo was taken, 
a verifier makes a query to the information storage server 50 using the 
verification unit 60 in Step SI 14 and the subsequent steps. The 

15 information storage server 50 performs a verification and transmits a 
verification result to the verification unit 60. The verification unit 60 
receives the verification result. The verifier confirms the content of the 
verification result. Hence, the photo of an illegally parked vehicle may 
attest to the fact that the vehicle had surely been parked illegally. 

20 [0129] 

It is another possibility of the verification process that the 
verification unit 60 acquires the photo of an illegally parked vehicle from 
the information storage server 50 as the certified information, and the 
verifier verifies the photo visually. Then, map information may be 
25 inputted to the verification unit 60 by prior arrangement, and the 
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background of the photo of the illegally parked vehicle may be compared 
with the map information, for example. In this case, the reliability of the 
location information and the time information may be enhanced. It is 
another possibility that the photograph position may be adjusted when 
5 taking a photo so that more characteristic background features are 

included in the photo. A panoramic photo (360 degrees panoramic view) 
may also be taken to include more background objects in the photo. 
Hence, a visual verification may be performed easily. 
[0130] 

10 Thus, the time when a person took a photo on patrol duty and the 

location where the person took the photo in an area may be certified. 
Then, at a later time, the authenticity of the time when the person took 
the photo and the location where the person took the photo may be 
confirmed. 

15 [0131] 

This embodiment is also applicable to other cases than attesting to 
the fact of illegal parking. For example, under a real estate lease 
agreement, there may be a claim for restitution of the building interior to 
its original condition at the end of the agreement when the tenant moves 

20 out. In this case, it is hard to distinguish whether specific damage was 
done before or after the tenant moved in. This had resulted in quite a 
number of cases of dispute over a repair needed between the 
superintendent of the property and the tenant. Now, the aforementioned 
system is available in this situation. Specifically, the building interior is 

25 photographed by the information processing equipment 40 when the 
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tenant moves in. Then, a photo of the building interior to which the 
certification of tinne and location is attached is stored in the information 
storage server 50, Thus, the building interior condition before the tenant 
moves in may be confirmed at a later time. The same may be applied to 

5 the case of repair, checkout, inspection, or the like of automobile. An 
automobile is photographed right before a repair, checkout, or inspection 
by the information processing equipment 40. Then, a photo of the 
automobile to which the certification of time and location is attached is 
stored in the information storage server 50. Hence, it becomes possible to 

10 attest to the fact that automobile damage was done during a repair, 

checkout, or inspection, or the fact that the automobile was dishonestly 
repaired, checked out, or inspected. 

[0132] 

15 Embodiment 4. 

A fourth embodiment utilizes the same certification system as that 
discussed in the third embodiment. According to the fourth embodiment, 
for the purpose of certifying that the person has visited a specific 
exhibition or the like, the time when the photo of a visitor was taken and 

20 the location where the photo was taken at an exhibition are certified to 
check the authenticity of the time and location of the photo at a later time. 
[0133] 

According to this embodiment, an exhibition attendant or a booth 
attendant takes photos of visitors using the information processing 
25 equipment 30 that is equipped with a camera function. The information 
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processing equipment 30 generates certified information based on the 
visitors' photos and electronic certificate issued by the certificate issuing 
server 40. The information storage server 50 stores the certified 
information. A verifier mal<es a query to the information storage server 

5 50 using the verification unit 60. The information storage server 50 

makes verification and transmits a verification result to the verification unit 
60. The verification unit 60 receives the verification result. The verifier 
confirms the content of the verification result. Hence, it becomes possible 
to attest to the fact that a specific person had visited a specific exhibition 

10 or the like by using the photo of the visitor. 
[0134] 

Just like the above mechanism, it is also possible to attest to the 
fact that a person had visited a specific sightseeing area, a specific 
attraction had been held, a specific lecture class had started or ended, or 
15 the like by using the certification system of this embodiment. 
[0135] 

Thus, the time and location of the photo of a person that was taken 
while the person visited a specific place may be certified, and at a later 
time, the authenticity of the time and location of that photo may be 
20 confirmed. 



[0136] 

Embodiment 5. 

Currently, ID photos may be taken and printed by means of ID 
25 photo machines that are installed at railway stations, department stores. 
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or the like. For a passport application, or the like, there may be a 
regulation that an ID photo must be taken within the last six months of 
submission date, for example. However, such photos, when submitted, 
cannot self-certify that they were taken within the last six months of the 
5 submission date. 
[0137] 

According to a fifth embodiment, the same certification system as 
that discussed in the third embodiment is utilized for certifying the time 
when an ID photo (a photo used for identifying oneself) was taken and for 
10 confirming the time of the ID photo at a later time. 
[0138] 

According to this embodiment, as shown in Fig. 8, an ID photo 
machine as the information processing equipment 30 is connected to the 
network 70. The other elements are the same as those discussed in the 
15 third embodiment. 
[0139] 

The information processing equipment 30 is the same in 
configuration as that of Fig. 3 discussed in the first embodiment. 
[0140] 

20 With this embodiment, a user takes his or her own ID photo by 

using the information processing equipment 30 of the ID photo machine. 
The information processing equipment 30 acquires a certification code, 
which is made up of numerals and signs, as the electronic certificate issued 
by the certificate issuing server 40 through the processes of Step SlOl to 

25 Step S107 shown in Fig. 6 discussed in the first embodiment. Then, the 
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information processing equipment 30 generates certified information based 
on an ID photo tal<en and the certification code acquired. Then, the 
information processing equipment 30 transmits the certified information to 
the information storage server 50. Also, the information processing 

5 equipment 30 prints the ID photo and also prints the certification code on 
the face or reverse side of the ID photo. Then, in Step SI 10, the 
information storage server 50 receives and stores in a database the 
certified information. Through the processes of Step Sill to Step S113, 
the information storage server 50 performs a confirmation process with the 

10 certificate issuing server 40. 
[0141] 

When the need arises to verify the time when the ID photo was 
tal<en and the site where the ID photo was tal<en, a verifier makes a query 
to the information storage server 50 using the verification unit 60 in Step 

15 SI 14 and the subsequent steps. The information storage server 50 

performs a verification and transmits a verification result to the verification 
unit 60. The verification unit 60 receives the verification result. Then, 
the verifier confirms the content of the verification result. It should be 
noted that the verification result includes information about the time of the 

20 verified ID photo when it was photographed, and information indicating 
whether or not the ID photo was taken within the last six months, for 
example. Hence, if there is a time limitation for ID photo production, an 
ID photo can self-certify whether or not it is valid within the limitation. 
[0142] 

25 The following is also possible, instead of a user submitting an ID 
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photo and a verifier performing tine verification mentioned above. If no ID 
photo is submitted by a user, a verifier may acquire ID photo data from the 
information storage server 50 using the verification unit 60 or the like, and 
then print the ID photo. 
5 [0143] 

The time when a photo was taken may thus be'certified. Then, if 
there is a regulation of time of photography, it may be confirmed whether 
or not the regulation is followed. 
[0144] 

10 The present embodiment is also applicable to cases other than 

certifying the time when an ID photo was produced. For example, a 
certification code like the one mentioned above is prestored in an IC credit 
card. When a customer makes a payment at a shop, a shop assistant 
reads the certification code using a checkout terminal and acquires a photo 

15 from the information storage server 50. The shop assistant compares the 
photo displayed on the checkout terminal with the user of the IC credit 
card. Thus, the shop assistant may confirm the identity of the customer 
Another case is that when a payment is made, a checkout terminal 
acquires a new certification code from the certificate issuing server 40, and 

20 generates certified information from information about purchased products, 
the amount of money for the payment, etc. and the certification code. 
Then, the checkout terminal registers the certified information in the 
information storage server 50, and at the same time prints the certification 
code on the receipt. Hence, a customer is allowed to confirm the account 

25 history of the person using the certification code at a later time. 



54 



[0145] 

Embodiment 6. 

A sixth embodiment utilizes a certification system designed for this 
5 embodiment. According to the sixth embodiment, for the purpose of a 
marshal (policeman) or the like confirming the identity of a passenger on 
board an airplane, the time when the passenger was photographed and the 
location where the passenger was photographed are certified to check 
whether or not the passenger on board is the one on the photo. 
10 [0146] 

Just like the one discussed in the fifth embodiment, an ID photo 
machine is connected to the network 70 as the information processing 
equipment 30 as shown in Fig. 8 according to this embodiment. 
[0147] 

15 Fig. 9 shows the configuration of a certification system according to 

this embodiment. 
[0148] 

The verification unit 60 of this embodiment is part of the 
certification system. The verification unit 60 acquires and stores in a 
20 database part of certified information and part of identification information 
that are stored in an information storage server 50. The other elements 
are the same as those discussed in the fifth embodiment. 
[0149] 

The information processing equipment 30 and the certificate 
25 issuing server 40 of this embodiment are the same in configuration as 
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those discussed in the fifth embodiment. 
[0150] 

Fig. 10 is a diagram illustrating the configuration of an information 
storage server 50. 
5 [0151] 

The information storage server 50 includes an information receiving 
section 51 that receives from the information processing equipment 30 the 
certified information to certify the operating environment of the 
information processing equipment 30 and the identification information to 

10 identify this certified information, and a storage memory section 53 that 
stores the certified information and the identification information received 
by the information receiving section 51. The part of the certified 
information and the part of the identification information stored in the 
storage memory section 53 are transmitted to the verification unit 60. 

15 [0152] 

Fig. 11 is a diagram illustrating a configuration of the verification 

unit 60. 
[0153] 

The verification unit 60 includes: a verification receiving section 61 
20 that receives from the information storage server 50 the certified 

information and the identification information for identifying this specific 
certified information; a verification memory section 63 that stores the 
certified information and the identification information received by the 
verification receiving section 61; and a verifying section 62 that receives a 
25 query including the identification information and verifies the certified 
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Information stored in the verification memory section 63. 
[0154] 

Just like the fifth embodiment, the information outputting section 
33 in the information processing equipment 30 generates certified 

5 Information that is made up of the electronic certificate received from the 
certificate transmitting section 43 in the certificate issuing server 40 and 
the processed information acquired by the information processing section 
31. The information outputting section 33 then transmits the certified 
Information to the information storage server 50. 

10 [0155] 

The information receiving section 51 in the information storage 
server 50 receives from the information processing equipment 30 and 
stores in the storage memory section 53 the certified Information and the 
identification Information for identifying the certified information. The 

15 information storage server 50, upon request for the certified Information 
from the verification unit 60, for example, transmits to the verification unit 
60 only the one that is preselected or the one that is requested by the 
verification unit 60 from among pieces of the certified information stored in 
the storage memory section 53. It is to be noted that the certified 

20 information is transmitted to the verification unit 60 always with a 
corresponding one of the identification information. 
[0156] 

The verification receiving section 61 in the verification unit 60 
receives from the Information storage server 50 and stores In the 
25 verification memory section 63 the certified information and the 
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identification information. The verification unit 60, in a verification 
process, receives a query including the identification information, and 
retrieves the certified information stored in the verification memory section 
63. Then, the verification unit 60 verifies the certified information 
5 retrieved, or outputs the certified information retrieved for verification. 
[0157] 

Fig. 12 is a diagram illustrating a process performed by the 
certification system according to this embodiment. 
[0158] 

10 With this embodiment, a user who is boarding an airplane takes his 

or her own ID photo by the information processing equipment of an ID 
photo machine. The information processing equipment 30 acquires a 
certification code, which is made up of numerals and signs, as the 
electronic certificate issued by the certificate issuing server 40, through the 

15 processes from Step S301 to Step S307, just like the processes of Step 
SlOl to Step S107 shown in Fig. 6 discussed in the first embodiment- 
Then, the information processing equipment 30 generates certified ' 
information based on an ID photo (image) taken and the certification code 
acquired. Then, the information processing equipment 30 transmits the 

20 certified information to the information storage server 50 (Step S308). 
Also, the information processing equipment 30 prints the ID photo. For 
example, the certification code is printed on the face side of the ID photo, 
and a two-dimensional barcode that is read for an access to the 
information storage server 50 may be printed on the reverse side thereof. 

25 Then, the information storage server 50 receives and stores in a database 
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the certified information (Step S309). Just like the processes of Step 
Sill to Step S113 of Fig. 6, the information storage server 50 perfornris a 
confirmation process with the certificate issuing server 40 through the 
processes of Step S310 to Step 312. 
5 [0159] 

To confirm airline passenger's identity, marshals have to acquire in 
advance the ID photos of passengers from the information storage server 
50 using the verification unit 60, such as a mobile terminal, and a 
wearable computer. As a process for acquiring the ID photos of 

10 passengers in advance, firstly, the verification unit 60 requests the 

information storage server 50 for the certified information (Step S3 13). 
Then, the information storage server 50 acquires part of the certified 
information stored in the database, and transmits the part of the certified 
information to the verification unit 60 (Step S314). It is to be noted that 

15 the certified information to be transmitted may be either selected by the 
information storage server 50 or specified by the verification unit 60. For 
example, a marshal may enter the name of an airline company, a flight 
name, a destination, etc. into the verification unit 60. This allows the 
verification unit 60 to request the ID photos of the passengers boarding on 

20 the flight concerned exclusively as the certified information. Another 

possibility is that a user may enter his or her personal information such as 
address, name, age, gender, telephone number, and the like into the 
information processing equipment 30 when his or her ID photo is taken. 
Then, the information storage server 50 may receive from the information 

25 processing equipment 30 and store therein this personal information. This 
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allows to specify an individual ID photo by using part of the personal 
information as a search key. To simplify the personal information entry, 
the information processing equipment 30 may be provided with a function 
to read information In a credit card, an airline card, an IC card, and the 
5 like. 
[0160] 

The verification unit 60, upon receipt of the certified information 
from the information storage server 50, stores the certified information in 
a local database (Step S3 16). Then, a marshal displays an ID photo 
10 stored in Step S316 on a wearable display (part of the verification unit) 
and confirms whether or not people seated on board the aircraft are the 
right passengers. 
[0161] 

Thus, the verification unit 60 may acquire and store the certified 
15 information by prior arrangement for verification of the certified 

information, instead of communicating with the information storage server 
50 every time when it performs a verification process. This enables a 
highly efficient verification process if the process is required more than 
once in a short period of time. 
20 [0162] 

In addition to the aforementioned method of confirming airline 
passenger's identity on board, the passenger's identity may be confirmed 
when a passenger purchases an air ticket or when a passenger checks in at 
an airport (when a boarding card is issued) according to this embodiment, 
25 which may further enhance airport security. In this case, at the time of 
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check-in, the time when the ID photo was tal<en (or the time when the ID 
photo was registered at the time of purchasing the air ticket) is confirmed. 
At the same time, the ID photo is registered (a certificate is Issued as well 
as when the photo was taken). In the airplane, the time when the ID 

5 photo was registered is confirmed. It may be confirmed that there is no 
switching between the right passengers and others during each period 
between the time of photo taking and the time of check-in and between 
the time of check-in and the time of boarding the aircraft. It is to be 
noted here that the verification process performed at the time of check-in 

10 of this embodiment may be replaced by the process discussed in the fifth 
embodiment. 
[0163] 

Security may be enhanced if the information that is to be received, 
stored, and transmitted by the information storage server 50 of this 
15 embodiment is encoded data. Furthermore, information stored in the 
information storage server 50 may be shared among two or more airline 
companies, or laid open to casualty insurance companies and public 
security institutions, thereby improving convenience. 

20 [0164] 

Embodiment 7. 

In mall order shopping, commercial products whose specifications 
and shapes are clearly indicated by the model names are more 
purchasable than others. The commercial products of this kind may cause 
25 fewer problems of inconsistency and misunderstanding between sellers and 
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buyers. Fresh produce or the like, however, has no model name, and Its 
shape and content are unique to each other. In this case, there are quite 
a few cases of inconsistency with the commercial products when sold only 
with the photos and descriptions. 
5 [0165] 

A seventh embodiment uses the same certification system as that 
discussed in the first embodiment. According to the seventh embodiment, 
the time when the photo of a commercial product was taken and the 
location where the photo was taken are certified to check the time and the 
10 location at a later time. 
[0166] 

With this embodiment, as shown in Fig. 13, the information 
processing equipment 30 is electronic equipment having a function to take 
photos (images), such as a digital camera. The other elements are the 
15 same as those discussed in the first embodiment. 
[0167] 

According to this embodiment, a trader who sells a commercial 
product 80, such as fruit, takes a photo of the commercial product 80 
using the information processing equipment 30 that is equipped with a 

20 camera function. The information processing equipment 30 acquires an 
electronic certificate issued by the certificate issuing server 40 through the 
processes of Step SlOl to Step S107 shown in Fig. 6 discussed in the first 
embodiment. Then, the information processing equipment 30 generates 
certified information based on the photo of the commercial product 80 and 

25 the electronic certificate acquired, and transmits the certified information 
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to the information storage server 50. In Step SI 10, the information 
storage server 50 receives and stores in a database the certified 
information. In Step Sill to Step S113, the information storage server 
50 performs a confirmation process with the certificate issuing server 40. 
5 The trader then shows the certified information (a photo 81 with additional 
certification for time and location) on his or her World Wide Web (WWW) 
site (a home page). 
[0168] 

With this embodiment, the information storage server 50 may be 
10 provided for each trader. In this case, a trader holds authentication 

information. Then, the trader inputs his or her authentication information 
into the information processing equipment 30. Or otherwise, his or her 
authentication information may be prestored in the information processing 
equipment 30. In this case, in Step S109, the information processing 
15 equipment 30 may access the information storage server 50 by using the 
authentication information to store the certified information in the 
information storage serer 50. 
[0169] 

When a consumer buys the commercial product 80, the person 
20 checks the area of production and the shipment date of the commercial 
product 80 by the certification added to the photo 81 on the WWW site 
using the verification unit 60 in and after Step SI 14. At the same time, 
the consumer selects the commercial product 80 by viewing the photo 81. 
Once the consumer orders the commercial product 80, the trader encloses 
25 the photo 81 in a package 82 of the commercial product 80, and sends off 
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the package 82 to the consumer. The consumer, upon receipt of the 
commercial product 80, checks if the commercial product 80 in the 
package is the one that the consumer ordered by comparing the 
commercial product 80 and the photo 81 enclosed in the package. The 

5 consumer may confirm the area of production and the shipment date of 
the commercial product 80 by the certification added to the photo 81 
received. Hence, business support may be provided to producers who 
wish for production area assurance. Furthermore, the amount of 
production may be checked by the number of photo prints. Hence, it 

10 becomes possible to prevent padding of shipment amount with products 
from other production areas. 
[0170] 

By thus certifying the time and location when a product was 
photographed, the place of origin of the product may be confirmed. 
15 [0171] 

This embodiment is not only applicable to mail order business but 
also to walk-in business in which products are sold at stores. In this case, 
products may be photographed on the production dates thereof, for 
example. Or otherwise, the date and year of production may be printed 
20 on labels. Then, the time when the photo was taken and the location 

where the photo was taken, or the time when the label was printed may be 
certified. Hence, the place of production, the date and year of production, 
and the like may be checked for each product. 



25 [0172] 
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Embodiment 8. 

An eighth embodiment uses the same certification system as that 
discussed in the seventh embodiment. According to the eighth 
embodiment, the time when a label was attached to each piece of fruit and 
5 the location where the label was attached are certified to check the time 
and location for each piece of fruit at a later time. 
[0173] 

With this embodiment, the information processing equipment 30 
shown in Fig. 13 of the seventh embodiment is a mobile type printer 
10 equipped with a label printing function. 
[0174] 

According to this embodiment, contracts are made with customers 
for each tree within an orchard. Then, at the harvesting time of the fruits, 
codes that certify the time and location are printed on labels by using the 
15 information processing equipment 30 that is equipped with a printer 

function. Then, the labels are attached to individual pieces of the fruit. 
Hence, customers are allowed to confirm when and from which tree each 
piece of the fruit was harvested. 
[0175] 

20 Another possibility is that each piece of fruit is photographed with a 

tree on which that piece grew, or photographed before and after harvest 
by the information processing equipment 30 that is equipped with a 
camera function as that discussed in the seventh embodiment. Then, the 
photo is transmitted to a Web server over the Internet by using the 

25 information processing equipment 30. Then, the photo may be put on the 
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home page of the farm. Hence, customer satisfaction may be improved 

with security. 

[0176] 

In addition, the information storage server 50 may be equipped 
5 with a function that allows a customer to access and search the database 
directly for photos stored therein. 



[0177] 

Embodiment 9. 

10 Currently, there are some cases where industrial waste is not 

properly treated through a process from delivery or discharge until 
disposal. 
[0178] 

A ninth embodiment utilizes the same certification system as that 
15 discussed in the first embodiment. According to the ninth embodiment, 
the time when the images of delivered or discharged materials of industrial 
waste at delivery or discharge were photographed and the location where 
those images were photographed are certified. Additionally, the time 
when the images of disposed materials of the industrial waste at disposal 
20 were photographed and the location where those images were 

photographed are certified to check, whether or not the industrial waste 

materials have been treated properly at a later time. 

[0179] 

With this embodiment, the information processing equipment 30 
25 shown in Fig. 1 discussed in the first embodiment is electronic equipment 



with a function to tal<e photos (images), such as a digital camera. 
[0180] 

According to this embodiment, a waste disposal firm handling 
industrial waste takes photos of waste materials at delivery or discharge as 

5 well as at disposal using the information processing equipment 30 that is 
equipped with a camera function. The information processing equipment 
30 acquires an electronic certificate issued by the certificate issuing server 
40 through the processes of Step SlOl to Step S107 shown in Fig. 6 
discussed in the first embodiment. Then, the information processing f 

10 equipment 30 generates certified information based on the photos of 
industrial waste and the electronic certificate acquired. Then, the 
information processing equipment 30 transmits the certified information to 
the information storage server 50. In Step SI 10, the information storage 
server 50 receives and stores in a database the certified information. 

15 Through the processes of Step Sill to Step S113, the information storage 
server 50 performs a confirmation process with the certificate issuing 
server 40. 
[0181] 

When the need arises to verify the time when the photos of 
20 industrial waste were taken and the site where the photos of industrial 
waste were taken, a verifier makes a query to the information storage 
server 50 using the verification unit 60 in Step SI 14 and the subsequent 
steps. The information storage server 50 performs a verification and 
transmits a verification result to the verification unit 60. The verification 
25 unit 60 receives the verification result. The verifier confirms the content 
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of the verification result. Hence, it becomes possible to attest to the fact, 
by using the photos of industrial waste, that the delivered or discharged 
industrial waste materials have been properly treated. 
[0182] 

5 It is another possibility that the information processing equipment 

30 be equipped further with a sensor for measuring the weight of the back 
of a truck carrying industrial waste in addition to the camera function. In 
this case, the information storage server 50 may collect the weight of the 
back of the truck at each elapsed time as the certified information, thereby 
10 monitoring changes in the weight of waste carried on the back of the truck. 
Then, it may be confirmed whether or not the waste materials have been 
treated through a proper route for disposal. It may also be confirmed 
whether or not the treatment has been performed at proper sites. Hence, 
it becomes possible to curb illegal waste disposal. 

15 

[0183] 

Embodiment 10. 

A tenth embodiment utilizes the same certification system as that 
discussed in the ninth embodiment. The tenth embodiment describes a 
20 case of certifying the time when beef was weighed and the location where 
the beef was weighed, and confirming at a later time that the beef was 
properly delivered. 
[0184] 

According to this embodiment, a beef dealer or butcher weighs 
25 beef in each step of the process handling the beef, such as slaughtering 
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and sorting, by using the infornnatlon processing equipment 30 that is 
equipped with a weighing function. The information processing equipment 
30 generates certified information based on a weight value and an 
electronic certificate issued by the certificate issuing server 40. The 
5 information storage server 50 stores this certified information. A verifier 
makes a query to the information storage server 50 using the verification 
unit 60. The information storage server 50 mal<es verification and 
transmits a verification request to the verification unit 60. The verification 
unit 60 receives the verification result. The verifier confirms the content 
10 of the verification result. This allows beef buyers to check for a change in 
the weight of the beef in each step. Hence, it becomes possible to check 
whether or not other meet is mixed with the specific beef through the 
steps. 
[0185] 

15 Another possibility may be that the information storage server 50 

stores pieces of certified information about the same beef with association 
between one another. This allows associated pieces of certified 
information to be cross-referenced to one another. Hence, the associated 
pieces of certified information may be linked to one another. 

20 

[0186] 

Embodiment 11. 

Currently, when a paper document is copied via a photo copy 
machine or transmitted via a facsimile (FAX) machine, if an outputted copy 
25 of the paper document is tampered with, then it Is difficult to attest to the 
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fact that the copy of the document is tampered with. 
[0187] 

An eleventh embodiment utilizes the same certification system as 
that discussed in the first embodiment. The eleventh embodiment 
5 describes a case of certifying the time when a paper document is copied 
via a photo copy machine or transmitted via a FAX machine and the 
location where the paper document is copied or transmitted, and 
confirming the time and location at a later time. 
[0188] 

10 With this embodiment, as shown in Fig. 14, the information 

processing equipment 30 is electronic equipment having a function to 
output paper documents, such as a photo copy machine and a FAX 
machine. The other elements are the same as those discussed in the first 
embodiment. 

15 [0189] 

According to this embodiment, a document is printed by using the 
information processing equipment 30 that is equipped with the function to 
output paper documents. The information processing equipment 30 
acquires an electronic certificate issued by the certificate issuing server 40 

20 through the processes of Step SlOl to Step S107 shown in Fig. 6 

discussed in the first embodiment. Then, the information processing 
equipment 30 generates certified information based on a photo copied or 
transmitted image of the document and the electronic certificate acquired. 
The information processing equipment 30 then combines a printable 

25 electronic certificate like a certification code (e.g., "D24YE9TOG11B" shown 
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in Fig. 14) with the image to print the document. Then, the information 
processing equipment 30 transmits the document to the information 
storage server 50. In Step SI 10, the information storage server 50 
receives and stores in a database the certified information. In the 
5 processes of Step Sill to Step SI 13, the information storage server 50 
performs a confirmation process with the certificate issuing server 40. 
[0190] 

To confirm that a printed copy or a photo copy of the document is 
not tampered with, the image of the document is confirmed based on the 
10 certification code that is printed on the printed copy of the document by 
using the verification unit 60, in and after Step SI 14. Hence, it becomes 
possible to confirm that the printed copy or photo copy of the document is 
not tampered with. 

15 [0191] 

Embodiment 12. 

Currently, in concrete test piece testing, there are quite a few cases 
where the identity cannot be verified between a sampled piece and a 
tested piece. It should be noted here that a concrete test piece is a piece 
20 of concrete for crash testing that is sampled at a lot in a field site in which 
freshly mixed concrete to be tested has been poured. The concrete test 
piece is also used for testing concrete to determine the type and amount of 
raw materials for concrete mixing, and the like. 
[0192] 

25 A twelfth embodiment utilizes the same certification system as that 
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discussed in the first embodiment. The twelfth embodiment describes a 
case of certifying the time when a concrete test piece was sampled and the 
location where the concrete test piece was sampled, and confirming that a 
concrete test piece at a test is the one sampled. 
5 [0193] 

With this embodiment, the information processing equipment 30 of 
Fig. 1 discussed in the first embodiment is communication equipment 
having a function to read information from a Radio Frequency ID (RFID) or 
write information into a RFID, such as a wireless reader/writer. 
10 [0194] 

According to this embodiment, a person who samples a concrete 
test piece measures the condition of the concrete test piece at the time of 
sampling by using a RFID tag/chip equipped with a function to measure 
the condition of concrete, such as a temperature sensor and a humidity 

15 sensor, for example. The RFID tag/chip, which is embedded in the 

concrete test piece, stores a measured condition of the concrete test piece 
(e.g., a measured value of temperature or humidity). The information 
processing equipment 30 of a wireless reader/writer reads the condition of 
the concrete test piece from the RFID embedded therein. Then, the 

20 information processing equipment 30 acquires an electronic certificate 
Issued by the certificate issuing server 40 through the processes of Step 
SlOl to Step S107 shown in Fig. 6 discussed in the first embodiment. 
Then, the information processing equipment 30 generates certified 
information based on the condition of the concrete test piece read out from 

25 the RFID and the electronic certificate acquired. Then, the information 
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processing equipment 30 transmits the certified information to the 
information storage server 50. In Step SI 10, the information storage 
server 50 receives and stores in a database the certified information. The 
information storage server 50 performs a confirmation process with the 
5 certificate issuing server 40 through the process of Step Sill to Step 
S113. 
[0195] 

With this embodiment, the information processing equipment 30 
performs the above-mentioned process regularly (e.g., every week). The 
10 information storage server 50 stores a record of the time, location, and 
condition of the concrete every time. It is to be noted here that the RFID 
tag/chip embedded in the concrete test piece may also store the time and 
location as well as the condition of the concrete. 
[0196] 

15 In the testing of the concrete test piece, if the time when the 

concrete test piece was sampled and the location where the concrete test 
piece was sampled is to be verified, the process is performed in Step SI 14 
and the subsequent steps as follows. A verifier makes a query to the 
information storage server 50 using the verification unit 60. The 

20 information storage server 50 performs verification and transmits a 
verification result to the verification unit 60. The verification unit 60 
receives the verification result. The verifier confirms the content of the 
verification result. Hence, it may be attested to the fact that the one at 
testing and the one at sampling are the same concrete test piece by using 

25 data stored in the RFID embedded in the concrete test piece during the 
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process of sampling to testing of the concrete test piece. 
[0197] 

With further reference to the foregoing embodiments, the 
5 information processing equipment does not always have to encode the 
time information and the location information when transmitting those to 
the certificate issuing server. 
[0198] 

With further reference to the foregoing embodiments, the 
10 information processing equipment does not always have to acquire the 
time information and the location information from GPS satellites. With 
reference to the first embodiment, in the case of certifying exclusively the 
time when an image was taken, for example, the time/location information 
receiving section 34 of the information processing equipment 30 shown in 
15 Fig. 3 Is omittable. In this case, the information processing equipment 30 
may either acquire the time information to be transmitted to the certificate 
issuing server 40 from an internal clock, or from a Network Time Protocol 
(NTP) server or the like over a network. 
[0199] 

20 With further reference to the foregoing embodiments, the 

information processing equipment does not always have to transmit the 
time information and the location information to the certificate issuing 
server. With reference to the first embodiment, for example, in the case 
of certifying exclusively the time when a photo was taken, the information 

25 processing equipment 30 may transmit the certification request to the 
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certificate issuing server 40 via the certification requesting section 32- 
The certificate issuing server 40 shown in Fig. 4 may acquire the time 
information indicating the current time from an internal clocic, from an NTP 
server or the lil<e over a networl<, or from a GPS satellite, a weather 
5 satellite, or the like. Then, the certificate issuing server 40 receives the 
certification request from the information processing equipment 30 via the 
certification request receiving section 41. The certificate issuing section 
42 attaches unique data available at no other time than the current time to 
the time Information, and issues the electronic certificate for thereby 
10 certifying the time. Subsequent processes are performed in the same 
manner as those discussed in the first embodiment. 
[0200] 

Thus, the certificate issuing server 40 may issue the certificate for 
certifying time by using the time information acquired by the certificate 
15 issuing server itself, instead of using the time information received from 
the information processing equipment 30. In this case, the information 
processing equipment 30 side is not allowed to manipulate the time that is 
certified. Hence, the reliability of the certification system is enhanced. 
[0201] 

20 For the reasons mentioned above, with reference to Fig. 6 

discussed in the first embodiment, for example, the GPS satellites 10 do 
not always have to transmit the time information and the location 
information to the information processing equipment 30. Furthermore, 
with reference to Step SlOl, the time information and the location 

25 information do not have to be encoded. Still further, in Step S102, the 
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time information and the location information do not have to be decoded. 
Still further, in Step SlOl, the time information may be transmitted 
exclusively, instead of transmitting the time information and the location 
information. Or, otherwise, neither of the time information nor the 
5 location information may be transmitted. 
[0202] 

The foregoing embodiments of the present invention being thus 
described should not limit the scope of the present invention. 
[0203] 

10 With further reference to foregoing each embodiment, the 

information processing equipment 30, the certificate issuing server 40, the 
information storage server 50, and the verification unit 60 may be 
Implemented by computer. 
[0204] 

15 The information processing equipment 30, the certificate issuing 

server 40, the information storage server 50, and the verification unit 60 
each are equipped with a central processing unit (CPU), which is not shown 
in the figures, for executing programs. The CPU may be connected via a 
bus to a Read Only Memory section (ROM), a Random Access Memory 

20 section (RAM), a communication board, a display, a keyboard, a mouse, a 
Flexible Disc Drive (FDD), a Compact Disc Drive (CDD), a magnetic disk 
drive, an optical disk drive, a printer, a scanner, and the like. 
[0205] 

A RAM is a type of volatile memory section. A ROM, a FDD, a CDD, 
25 a magnetic disk drive, an optical disk drive are types of nonvolatile 
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memories. They are the examples of memories or storages. 
[0206] 

Information handled by the information processing equipment 30, 
the certificate issuing server 40, the information storage server 50, and the 
5 verification unit 60 is recorded and read by a memory section or storage. 
[0207] 

The communication board is connected, for example, to a LAN, the 
Internet, an Integrated Services Digital Network (ISDN), and the like. 
[0208] 

10 The magnetic disk drive stores an operating system (OS), a window 

system, a program group, and a file group. The program group Is 
executed by the CPU, the OS, and the window system. 
[0209] 

The information processing equipment 30, the certificate issuing 
15 server 40, the information storage server 50, and the verification unit 60 
each may be configured in part or in full by a computer operable program. 
Or, otherwise, they may be implemented by a firmware that is stored in 
the ROM. Or, otherwise, they may be embodied as a combination of 
software and hardware, or a combination of software, hardware, and 
20 firmware. 
[0210] 

The program group includes programs for making the CPU execute 
the processes described as "sections" in the foregoing embodiments. 
These programs are generated by a computer language, such as C 
25 language, HTML, SGML, and XML, for example. 
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[0211] 

The aforementioned programs are stored by other types of storage 
medium, such as a magnetic disk drive, a Flexible Disk (FD), an optical 
disk, a Compact Disk (CD), a Mini Disk, (MD), and a Digital Versatile Disc 
5 (DVD), and read by the CPU to be executed. 

Brief Description of the Drawings 
[0212] 

Fig. 1 is a diagram illustrating a configuration that is necessary for 
10 certifying the time when an image was taken in security patrol rounds and 
the site where the image was taken according to a first embodiment; 

Fig. 2 is a diagram illustrating the configuration of a certification 
system for security patrol according to the first embodiment; 

Fig. 3 is a diagram illustrating a configuration of the information 
15 processing equipment according to the first embodiment; 

Fig. 4 is a diagram illustrating a configuration of the certificate 
issuing server according to the first embodiment; 

Fig. 5 is a diagram illustrating a configuration of the information 
storage server according to the first embodiment; 
20 Fig. 6 is a diagram illustrating a process of certifying the time when 

an image was taken in security patrol rounds and the site where the image 
was taken by the certification system according to the first embodiment; 

Fig. 7 is a diagram illustrating a process of certifying the time when 
an image was taken in security patrol rounds and the site where the image 
25 was taken by a certification system according to a second embodiment; 



78 

Fig. 8 is a diagram illustrating a configuration that is necessary for 
certifying the time when an ID photo was taken and the site where the ID 
photo was taken according to a fifth embodiment; 

Fig. 9 is a diagram illustrating the configuration of a certification 
5 system according to a sixth embodiment; 

Fig. 10 is a diagram illustrating the configuration of an information 
storage server according to the sixth embodiment; 

Fig. 11 is a diagram illustrating a configuration of the verification 
unit according to the sixth embodiment; 
10 Fig. 12 is a diagram illustrating a process of acquiring certified 

information by the verification unit in the certification system according to 
the sixth embodiment; 

Fig. 13 is a diagram illustrating a configuration that is necessary for 
certifying the time when a commercial product was photographed and the 
15 site where the commercial product was photographed according to a 
seventh embodiment; and 

Fig. 14 is a diagram illustrating a configuration that is necessary for 
certifying the time when a paper document was outputted and the site 
where the paper document was outputted according to an eleventh 
20 embodiment. 

Explanation of Reference Numerals 
[0213] 

10 GPS satellite 
25 20 weather satellite 



79 

30 information processing equipment 

31 information processing section 

32 certification requesting section 

33 information outputting section 

5 34 time/location information receiving section 

40 certificate issuing server 

41 certification request receiving section 

42 certificate issuing section 

43 certificate transmitting section 

10 44 weather information receiving section 

45 location Information compensating section 

50 Information storage server 

51 information receiving section 

52 certification outputting section 
15 53 storage memory section 

60 verification unit 

61 verification receiving section 

62 verifying section 

63 verification memory section 
20 70 network 

80 commercial product 

81 plioto 

82 package 



